This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
File:                     zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft (raw, json)
Hash identifier:          cR+tAz9cMcFwGz+ry0ZAUwS1fvZzpyAR0SCcVMu+6zo=
Subject key identifier:   3E:C6:28:3B:83:73:8D:00:99:4E:B3:D0:7F:61:89:B5:41:73:55:22
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       E3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
Manifest number:          1B75
Signing time:             Sat 22 Nov 2025 19:03:24 +0000
Manifest this update:     Sat 22 Nov 2025 19:03:24 +0000
Manifest next update:     Sun 07 Dec 2025 19:03:24 +0000
Files and hashes:         1: 4xy2CWQ9PPM5I9ah5rfoVxupEBk.roa (hash: vtasrQjhyW9VQgbtAwIYMT3fBNNafdDFdd7m91AWZtQ=)
                          2: 5Ol2j2-zoC0T0kW7IYjRGDtlo3g.roa (hash: l1ZvvVenXGwjv81tLI7yddUYXEHmaiJI4owjl7rrO9M=)
                          3: M3cYqK4LUjl1OauTjsZjlyr9OzA.roa (hash: y+t9BGApdTy2sVBp4Y7HYm0baXJbBTkpsHeetIigNyw=)
                          4: RuxdsoCsL9SrWzfHdidddqnu-5E.roa (hash: woPt9e/qONz9vUx79Qh8Pq8fA66mhOE9QI3a3f0z8X0=)
                          5: U7OuapokLIQZ76REfj_eM1YXuME.roa (hash: ddYJO8WAE3h9G3iJMRZE7kaNZ1npm5UxxKpl9z0UxXs=)
                          6: _e3jgBm0uaHLPl8oLSQTAQj5Hvw.roa (hash: 7TJ7GER8imQiYyGKjrbKC6jumqWGW9cFBZs2Y0oyo78=)
                          7: a7sZgh200aTfpuTOIR2ii6h8Kzk.roa (hash: hisRXBGn6tIs0DN3ssnnOjNxMJ06EiX7TZL4iz0hI64=)
                          8: hfSHFV4DyeNxA2xvq3aBmPr1Q-M.roa (hash: HoNm62rA86M+fCGfwhGJZdkjUCy6zMxCpTj86BTXFNg=)
                          9: jhh_jSFkCm45_NS2lKm4Y3S4TbU.roa (hash: wOj81VSmWY63HO0GQpe9ks+IbgqvDqSZkCkLy3xEPfA=)
                          10: kDPxcp7iq4_STyniVj91rFBsZUc.roa (hash: Lo7SOWUjPjUSSJJkmKlNJ9PLvDkWl4ZMH2unMUi0BM0=)
                          11: khTcXRwJSZ8-d9ltCCcB4a1j_q8.roa (hash: Ayt9Ct6XWzRiPl0MN4LL8ZSLV9Zclv7K1gqQJOUK5x8=)
                          12: oaqOZtiJriEHWHXqnoZTl_F__DM.roa (hash: c52Lj/veFVLwmqsK2maVaTqJyiOt6AC9Ml2c51eIapk=)
                          13: yMppmJ0ePcCwV7jdLeFoJtTzti0.roa (hash: uVYzqGJSAvIxYWg/IYHGMRlpBWDvYdbvrkejQ/7v4A0=)
                          14: yRwo7eBFIGi8pOGoXVIJ4YGS_Ag.roa (hash: 2tKNG6svpV59eVTRpTo8opyrnZ2QnKws69jMVntxGxA=)
                          15: zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl (hash: e0RCJFOan0V+/dpNv7fk9F0hYp0P0/Z+y+MPGBE/Fgs=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Nov 15 01:38:08 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=3EC6283B83738D00994EB3D07F6189B541735522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:25:50:92:66:6d:f6:f4:a6:de:a1:f7:77:d0:
                    33:45:20:47:cb:32:20:be:90:1a:41:34:f4:d0:28:
                    a8:44:73:5b:3f:ee:35:dc:ad:b8:6b:39:91:d0:a4:
                    77:4b:a0:ee:0c:36:e3:89:94:9d:e8:7a:f3:51:cf:
                    2d:26:3c:04:43:b7:27:e1:58:75:d4:7d:7f:be:38:
                    80:53:ce:aa:aa:1a:bf:13:4b:f1:d7:61:65:56:82:
                    34:25:b6:75:80:e3:bf:c4:69:da:d7:3f:d8:24:9d:
                    32:cc:cf:95:8a:5d:03:ff:13:6b:2e:8c:d2:6c:0c:
                    83:a7:b9:88:3a:31:3f:b5:4c:0e:2a:87:38:54:a0:
                    26:a2:97:3c:b0:37:5d:8b:70:5c:32:3a:cf:f5:67:
                    21:a5:92:da:0c:a2:50:58:ca:cd:4d:13:6c:56:e6:
                    86:2e:03:77:8e:5e:4d:e7:bf:50:59:34:57:eb:97:
                    f7:1d:a2:e0:ee:64:16:09:e0:cf:4a:31:45:57:73:
                    62:d4:a6:c3:d9:f2:d9:1c:94:67:04:42:47:a9:71:
                    51:16:fd:93:f9:15:c4:8d:21:19:bc:f5:a6:8f:8d:
                    15:d9:19:92:43:a1:74:b5:ac:8f:70:3e:40:70:0b:
                    d9:65:14:27:ca:15:71:a3:01:8d:3b:e3:a4:47:c4:
                    e4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C6:28:3B:83:73:8D:00:99:4E:B3:D0:7F:61:89:B5:41:73:55:22
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:86:92:be:38:21:47:5b:6e:ad:04:ca:94:e1:17:06:88:e6:
         d9:dc:72:63:59:83:c9:35:02:8f:b0:c8:65:00:ef:2b:c0:5d:
         dd:0f:4a:09:5d:f9:bf:7d:2a:0b:e7:52:0e:0e:a6:27:d5:61:
         27:a3:42:06:17:10:28:37:81:cb:29:75:c0:21:2c:6f:e4:cb:
         57:95:c4:fd:8a:17:63:a5:5f:99:97:b8:96:53:ae:92:c7:97:
         5c:ca:cd:08:b6:5b:1b:83:7d:c2:a4:61:a1:d1:e9:1f:4c:b0:
         da:98:9e:20:b1:58:63:a0:fd:95:59:81:e0:76:93:c2:f0:ea:
         b1:6a:da:5d:8c:14:fa:d9:1e:a9:23:59:c9:e8:6a:ce:21:3c:
         e9:82:e0:2c:a0:be:50:a9:58:0a:72:b6:33:12:c0:7c:81:33:
         fc:d1:6c:e9:02:ed:3f:31:24:4a:47:86:43:12:0f:36:7c:8a:
         2f:33:5f:66:ae:a3:38:a0:77:79:49:35:b5:7b:79:61:44:3a:
         58:8a:99:9e:89:47:f3:c1:f5:b0:b9:97:01:aa:00:80:7b:ca:
         a9:98:76:ac:12:14:8a:c3:31:98:ae:1d:99:0f:a2:70:4d:e2:
         a9:8e:a5:69:b5:53:f9:a2:ea:49:f7:b7:cb:e8:12:bd:0d:0d:
         5c:15:fd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:16:16 2025 by rpki-client